Lucene search
+L

1244 matches found

RedHat Linux
RedHat Linux
•added 2026/05/19 9:56 p.m.•12 views

firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Playback component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Incorrect boundary conditions in the Audio/Video: Playback component...

9.8CVSS7.2AI score0.00596EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
•added 2026/05/19 9:52 p.m.•14 views

firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Playback component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Incorrect boundary conditions in the Audio/Video: Playback component...

9.8CVSS7.2AI score0.00596EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
•added 2026/05/19 4:23 p.m.•10 views

firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Playback component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Incorrect boundary conditions in the Audio/Video: Playback component...

9.8CVSS7.2AI score0.00596EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
•added 2026/05/19 4:15 p.m.•13 views

firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Playback component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Incorrect boundary conditions in the Audio/Video: Playback component...

9.8CVSS7.2AI score0.00596EPSS
SaveExploits0References7
NVD
NVD
•added 2026/05/18 10:16 p.m.•33 views

CVE-2026-27737

BigBlueButton is an open-source virtual classroom. In versions prior to 3.0.19, the recording playback presentation format was not sanitizing user's input in public chat. This allowed for a malicious actor to craft and carry out a targeted XSS attack, activated on anyone replaying the recording...

6.5CVSS0.00428EPSS
SaveExploits0References5
attackerkb
attackerkb
•added 2026/05/18 9:11 p.m.•27 views

CVE-2026-27737

BigBlueButton is an open-source virtual classroom. In versions prior to 3.0.19, the recording playback presentation format was not sanitizing user's input in public chat. This allowed for a malicious actor to craft and carry out a targeted XSS attack, activated on anyone replaying the recording...

6.5CVSS5.7AI score0.00428EPSS
SaveExploits0References6Affected Software3
CVE
CVE
•added 2026/05/18 9:11 p.m.•47 views

CVE-2026-27737

CVE-2026-27737 affects BigBlueButton prior to version 3.0.19 . The issue arises in the recording playback (presentation format) where user input in the public chat was not sanitized, enabling a targeted XSS attack when replaying the recording. Root cause: missing input sanitization in the bbb-pla...

6.5CVSS5.7AI score0.00428EPSS
SaveExploits0References5
OSV
OSV
•added 2026/05/18 9:11 p.m.•38 views

CVE-2026-27737 BigBlueButton has Stored XSS in bbb-playback replay

BigBlueButton is an open-source virtual classroom. In versions prior to 3.0.19, the recording playback presentation format was not sanitizing user's input in public chat. This allowed for a malicious actor to craft and carry out a targeted XSS attack, activated on anyone replaying the recording...

6.5CVSS5.9AI score
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2026/05/18 12:00 a.m.•24 views

PT-2026-41738

Name of the Vulnerable Software and Affected Versions BigBlueButton versions prior to 3.0.19 Description Recording playback in presentation format fails to sanitize user input within the public chat. This allows a malicious actor to execute a targeted Cross-Site Scripting XSS attack—a technique...

6.5CVSS5.9AI score0.00428EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/18 12:00 a.m.•2 views

CVE-2026-27737: Improper Neutralization of Input During Web Page Generation

BigBlueButton is an open-source virtual classroom. In versions prior to 3.0.19, the recording playback presentation format was not sanitizing user's input in public chat. This allowed for a malicious actor to craft and carry out a targeted XSS attack, activated on anyone replaying the recording...

6.5CVSS5.7AI score0.00428EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2026/05/18 12:00 a.m.•23 views

Vulnerability of the Audio/Video component: The playback feature in Mozilla Firefox browsers and Thunderbird email client allows attackers to trigger a service failure.

The vulnerability of the Audio/Video component: The playback functions of Mozilla Firefox browsers and the Thunderbird email client are vulnerable to a resource consumption issue that is not controlled. Exploiting this vulnerability could allow an attacker to cause service interruptions...

7.8CVSS7.4AI score0.00517EPSS
SaveExploits0References8Affected Software3
Tenable Nessus
Tenable Nessus
•added 2026/05/16 12:00 a.m.•16 views

SUSE SLES16 Security Update : MozillaFirefox (SUSE-SU-2026:21607-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:21607-1 advisory. This update for MozillaFirefox fixes the following issues Updated to Firefox Extended Support Release 140.10.2 ESR bsc1264378,MFSA...

9.8CVSS7.3AI score0.00628EPSS
SaveExploits0References10
OSV
OSV
•added 2026/05/12 12:00 p.m.•13 views

SUSE-SU-2026:1830-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues Updated to Firefox Extended Support Release 140.10.2 ESR bsc1264378,MFSA 2026-41: - CVE-2026-8090: Use-after-free in the DOM: Networking component. - CVE-2026-8092: Memory safety bugs fixed in Firefox ESR 115.35.2, Firefox ESR 140.10.2 and...

9.8CVSS7.5AI score0.00628EPSS
SaveExploits0References11
OSV
OSV
•added 2026/05/09 11:11 a.m.•22 views

OESA-2026-2274 firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. %if 0 %global mozdebugprefix /lib/debug %global mozdebugdir /lib/debug/ %global unamem %uname -m %global symbolsfilename -.en-US.-%uname.crashreporter-symbols.zip %global symbolsfilepath...

9.1CVSS7.4AI score0.00596EPSS
SaveExploits0References2
OSV
OSV
•added 2026/05/09 11:11 a.m.•18 views

OESA-2026-2273 firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. %if 0 %global mozdebugprefix /lib/debug %global mozdebugdir /lib/debug/ %global unamem %uname -m %global symbolsfilename -.en-US.-%uname.crashreporter-symbols.zip %global symbolsfilepath...

9.1CVSS7.4AI score0.00596EPSS
SaveExploits0References2
OSV
OSV
•added 2026/05/09 11:11 a.m.•19 views

OESA-2026-2275 firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. %if 0 %global mozdebugprefix /lib/debug %global mozdebugdir /lib/debug/ %global unamem %uname -m %global symbolsfilename -.en-US.-%uname.crashreporter-symbols.zip %global symbolsfilepath...

9.6CVSS8.3AI score0.00603EPSS
SaveExploits0References6
OSV
OSV
•added 2026/05/09 11:11 a.m.•14 views

OESA-2026-2272 firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. %if 0 %global mozdebugprefix /lib/debug %global mozdebugdir /lib/debug/ %global unamem %uname -m %global symbolsfilename -.en-US.-%uname.crashreporter-symbols.zip %global symbolsfilepath...

9.1CVSS7.4AI score0.00596EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2026/05/08 2:25 a.m.•22 views

SUSE CVE-2026-8091

Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 150, Thunderbird 150, Firefox ESR 140.10.1, Thunderbird 140.10.1, and Firefox ESR 115.35.2...

8.8CVSS7.4AI score0.00596EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
•added 2026/05/08 12:00 a.m.•13 views

FreeBSD : Mozilla -- Incorrect boundary conditions (76763f24-4aae-11f1-88d3-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 76763f24-4aae-11f1-88d3-b42e991fc52e advisory. https://bugzilla.mozilla.org/showbug.cgi?id=2029301 reports: Incorrect boundary conditions in the...

9.8CVSS7.4AI score0.00596EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/05/07 3:38 p.m.•28 views

EUVD-2026-28362

Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox ESR 140.10.2 and Firefox ESR 115.35.2...

7.4AI score0.00596EPSS
SaveExploits0References4
Rows per page
Query Builder